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INTRODUCTION 


V,  /  ^ 

^  This  Validation  Summary  Report  describes  the  extent  to  which  a 

specific  Ada  compiler  conforms  to  the  Ada  Standard,  ANSI/MIL-STD-1815A. 
This  report  explains  all  technical  terms  used  within  it  and  thoroughly 
reports  the  results  of  testing  this  compiler  using  the  Ada  Compiler 
Validation  Capability  (ACVC).  An  Ada  compiler  must  be  implemented 
according  to  the  Ada  Standard,  and  any  implementation-dependent  features 
must  conform  to  the  requirements  of  the  Ada  Standard.  The  Ada  Standard 
must  be  implemented  in  its  entirety,  and  nothing  cam  be  implemented  that  is 
not  in  the  Standard. 

Q — . — - - - -  - 

Even  though  all  validated  Ada  compilers  conform  to  the  Ada  Standard,  it 
must  be  understood  that  some  differences  do  exist  between  implementations . 
The  Ada  Standard  permits  some  implementation  dependencies~for  example,  the 
maximum  length  of  identifiers  or  the  maximuc.  values  of  integer-  types . 
Other  differences  between  compilers  result  from  the  characteristics  of 
particulam  operating  systems,  hardware,  or  implementation  strategies.  All 
the  dependencies  observed  during  the  process  of  testing  this  compiler  are 
given  in  this  report.  ') 


The  information  in  this  report  is  derived  from  the  test  results  produced 
during  validation  testing.  The  validation  process  includes  submitting  a 
suite  of  standardized  tests,  the  ACVC,  as  inputs  to  an  Ada  compiler  and 
evaluating  the  results.  \ The  purpose  of  validating  is  to  ensure  conformity 
of  the  compiler  to  the  Ad^v,Standard  by  testing  that  the  compiler  properly 
implements  legal  language  \constructs  and  that  it  identifies  and  rejects 
illegal  language  constructs,  ^pie  testing  also  identifies  behavior  that  is 
implementation  dependent  but  permitted  by  the  Ada  Standard.  Six  classes  of 
tests  are  used.  These  tests  are  designed  to  perform  checks  at  compile 
time,  at  link  time,  and  during  execution. 


C 
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1.1  PURPOSE  OF  THIS  VALIDATION  SUMMARY  REPORT 

This  VSR  documents  the  results  of  the  validation  testing  performed  on  an 
Ada  compiler.  Testing  waus  carried  out  for  the  following  purposes: 

.  To  attempt  to  identify  any  language  constructs  supported  by  the 
compiler  that  do  not  conform  to  the  Ada  Standard 

.  To  attempt  to  identify  any  language  constructs  not  supported  by 
the  compiler  but  required  by  the  Ada  Standard 

.  To  determine  that  the  implementation-dependent  behavior  is  allowed 
by  the  Ada  Standard 


Testing  of  this  compiler  was  conducted  by  SofTech,  Inc.  under  the 
direction  of  the  AVF  according  to  procedures  established  by  the  Ada  Joint 
Program  Office  and  administered  by  the  Ada  Validation  Organization  (AVO). 
On-site  testing  was  completed  2  May  I988  at  Richardson,  TX. 


1.2  USE  OF  THIS  VALIDATION  SUMMARY  REPORT 

Consistent  with  the  national  laws  of  the  originating  country,  the  AVO  may 
make  full  and  free  public  disclosure  of  this  report.  In  the  United  States, 
this  is  provided  in  accordance  with  the  "Freedom  of  Information  Act"  (5 
U.S.C,  #552).  The  results  of  this  validation  apply  only  to  the  computers, 
operating  systems,  and  compiler  versions  identified  in  this  report. 

The  organizations  represented  on  the  signature  page  of  this  report  do  not 
represent  or  warrant  that  all  statements  set  forth  in  this  report  are 
accurate  and  complete,  or  that  the  subject  compiler  has  no  nonconformities 
to  the  Ada  StanuJird  other  than  those  presented.  Copies  of  this  report  are 
available  to  the  public  from: 

Ada  Information  Clearinghouse 
Ada  Joint  Program  Office 
OUSDRE 

The  Pentagon,  Rm  3D-139  (Fern  Street) 

Washington  DC  20301-3081 


or  from: 


Ada  Validation  Facility 
ASD/SCEL 

Wright-Patterson  AFB  OH  45433-6503 
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Questions  regarding  this  report  or  the  validation  test  results  should  be 
directed  to  the  AVF  listed  above  or  to: 

Ada  Validation  Organization 
Institute  for  Defense  Analyses 
1801  North  Beauregard  Street 
Alexandria  VA  22311 


1.3  REFERENCES 


1 .  Reference  Manual  for  the  Ada  Programming  Language , 
ANSI/MIL-STD-1815A,  February  1983  and  ISO  8652-1987. 

2.  Ada  Compiler  Validation  Procedures  and  Guidelines .  Ada  Joint 
Program  Office,  1  January  1987. 

3.  Ada  Compiler  Validation  Capability  Implementers  *  Guide ,  SofTech, 
Inc.,  December  1986. 

4.  Ada  Compiler  Validation  Capability  User*s  Guide,  December  1986. 


1.4  DEFINITION  OF  TERMS 


ACVC  The  Ada  Compiler  Validation  Capability.  The  set  of  Ada 

programs  that  tests  the  conformity  of  an  Ada  compiler  to  the 
Ada  programming  language. 


Ada  An  Ada  Commentary  contains  all  information  relevant  to  the 

Commentary  point  addressed  by  a  comment  on  the  Ada  Standard.  These 

comments  are  given  a  unique  identification  nixmber  having  the 
form  Al-ddddd. 


Ada  Standard  ANSI/MIL-STD-1815A,  February  1983  and  ISO  8652-1987. 

Applicant  The  agency  requesting  validation. 

AVF  The  Ada  Validation  Facility.  The  AVF  is  responsible  for 

conducting  compiler  validations  according  to  procedures 
contained  in  the  Ada  Compiler  Validation  Procedures  and 
Guidelines. 

AVO  The  Ada  Validation  Organization.  The  AVO  has  oversight 

authority  over  all  AVF  practices  for  the  purpose  of 
maintaining  a  uniform  process  for  validation  of  Ada 
compilers.  The  AVO  provides  administrative  and  technical 
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support  for  Ada  validations  to  ensure  consistent  practices . 

Compiler  A  processor  for  the  Ada  language.  In  the  context  of  this 

report,  a  compiler  is  any  language  processor,  including 
cross-compilers,  translators,  and  interpreters. 

Failed  test  An  ACVC  test  for  which  the  compiler  generates  a  result  that 
demonstrates  nonconformity  to  the  Ada  Standard. 

Host  The  computer  on  which  the  compiler  resides. 

Inapplicable  An  ACVC  test  that  uses  features  of  the  language  that  a 

test  compiler  is  not  required  to  support  or  may  legitimately 

support  in  a  way  other  than  the  one  expected  by  the  test. 

Passed  test  An  ACVC  test  for  which  a  compiler  generates  the  expected 

result . 

Target  The  computer  for  which  a  compiler  generates  code. 

Test  A  program  that  checks  a  compiler's  conformity  regau'ding  a 

particular  feature  or  a  combination  of  features  to  the  Ada 
Standard.  In  the  context  of  this  report,  the  term  is  used  to 
designate  a  single  test,  which  may  comprise  one  or  more 


An  ACVC  test  found  to  be  incorrect  amd  not  used  to  check 
conformity  to  the  Ada  Standard.  A  test  may  be  incorrect 
because  it  has  an  invalid  test  objective,  fails  to  meet  its 
test  objective,  or  contains  illegal  or  erroneous  use  of  the 
language . 


1.5  ACVC  TEST  CLASSES 

Conformity  to  the  Ada  Standard  is  measured  using  the  ACVC.  ,  The  ACVC 
contains  both  legal  amd  illegal  Ada  programs  structured  into  six  test 
classes:  A,  B,  C,  D,  E,  auid  L.  The  first  letter  of  a  test  name  identifies 
the  class  to  which  it  belongs.  Class  A,  C,  D,  and  E  tests  are  executable, 
and  special  program  units  are  used  to  report  their  results  during 
execution.  Class  B  tests  are  expected  to  produce  compilation  errors. 
Class  L  tests  are  expected  to  produce  compilation  or  link  errors. 

Class  A  tests  check  that  legal  Ada  programs  cam  be  successfully  compiled 
amd  executed.  There  are  no  explicit  program  components  in  a  Class  A  test 
to  check  semantics.  For  example,  a  Class  A  test  checks  that  reserved  words 
of  another  language  'other  than  those  already  reserved  in  the  Ada  language) 
are  not  treated  as  reserved  words  by  an  Ada  compiler.  A  Class  A  test  is 
passed  if  no  errors  are  detected  at  compile  time  and  the  program  executes 
to  produce  a  PASSED  message. 


Withdrawn 

test 
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Class  B  tests  check  that  a  compiler  detects  illegal  language  usage.  Class 
B  teats  are  not  executable.  Each  test  in  this  cleiss  is  compiled  and  the 
resulting  compilation  listing  is  examined  to  verify  that  every  syntax  or 
semantic  error  in  the  test  is  detected.  A  Class  B  test  is  passed  if  every 
illegal  construct  that  it  contains  is  detected  by  the  compiler. 

Class  C  tests  check  that  legal  Ada  programs  can  be  correctly  compiled  and 
executed.  Each  Class  C  test  is  self-checking  and  produces  a  PASSED, 
FAILED,  or  NOT  APPLICABLE  message  indicating  the  result  when  it  is 
executed . 

Class  D  tests  check  the  compilation  and  execution  capacities  of  a  compiler. 
Since  there  are  no  capacity  requirements  placed  on  a  compiler  by  the  Ada 
Standard  for  some  parameters — for  example,  the  number  of  identifiers 
permitted  in  a  compilation  or  the  number  of  units  in  a  library~a  compiler 
may  refuse  to  compile  a  Class  D  test  and  still  be  a  conforming  compiler. 
Therefore,  if  a  Class  D  test  fails  to  compile  because  the  capacity  of  the 
compiler  is  exceeded,  the  test  is  claussified  as  inapplicable.  If  a  Class  D 
test  compiles  successfully,  it  is  self-checking  aind  produces  a  PASSED  or 
FAILED  message  during  execution. 

Each  Class  E  test  is  self-checking  and  produces  a  NOT  APPLICABLE,  PASSED, 
or  FAILED  message  when  it  is  compiled  and  executed.  However,  the  Ada 
Standard  permits  an  implementation  to  reject  programs  containing  some 
features  addressed  by  Class  E  teats  during  compilation.  Therefore,  a  Class 
E  teat  is  passed  by  a  compiler  if  it  is  compiled  successfully  and  executes 
to  produce  a  PASSED  message,  or  if  it  is  rejected  by  the  compiler  for  an 
allowable  reason. 

Class  L  tests  check  that  incomplete  or  illegal  Ada  programs  involving 
multiple,  separately  compiled  units  are  detected  and  not  allowed  to 
execute.  Class  L  tests  are  compiled  separately  and  execution  is  attempted. 
A  Class  L  test  passes  if  it  is  rejected  at  link  time — that  is,  an  attempt 
to  execute  the  main  program  must  generate  an  error  message  before  any 
declarations  in  the  main  program  or  any  units  referenced  by  the  main 
program  are  elaborated. 

Two  library  units,  the  package  REPORT  and  the  procedure  CHECK_FILE,  support 
the  self-checking  features  of  the  executable  tests.  The  package  REPORT 
provides  the  mechanism  by  which  executable  tests  report  PASSED,  FAILED,  or 
NOT  APPLICABLE  results.  It  also  provides  a  set  of  identity  functions  used 
to  defeat  sane  compiler  optimizations  allowed  by  the  Ada  Standard  that 
would  circumvent  a  test  objective.  The  procedure  CHECK_FILE  is  used  to 
check  the  contents  of  text  files  written  by  some  of  the  Class  C  tests  for 
chapter  14  of  the  Ada  Standard.  The  operation  of  REPORT  and  CHECK_FILE  is 
checked  by  a  set  of  executable  tests.  These  tests  produce  messages  that 
are  examined  to  verify  that  the  units  are  operating  correctly.  If  these 
units  are  not  operating  correctly,  then  the  validation  is  not  attempted. 

The  text  of  the  teats  in  the  ACVC  follow  conventions  that  are  intended  to 
ensure  that  the  tests  are  reasonably  portable  without  modification.  For 
example,  the  tests  make  use  of  only  the  basic  set  of  55  characters,  contain 
lines  with  a  maximum  length  of  72  characters,  use  small  numeric  values,  and 
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place  features  that  may  not  be  supported  by  all  implementations  in  separate 
tests.  However,  some  tests  contain  values  that  require  the  test  to  be 
customized  according  to  implementation-specific  values — for  example,  an 
illegal  file  name.  k  list  of  the  values  used  for  this  validation  is 
provided  in  Appendix  C. 

A  compiler  must  correctly  process  each  of  the  tests  in  the  suite  and 
demonstrate  conformity  to  the  Ada  Standard  by  either  meeting  the  pass 
criteria  given  for  the  teat  or  by  showing  that  the  teat  is  inapplicable  to 
the  implementation.  The  applicability  of  a  test  to  an  implementation  is 
considered  each  time  the  implementation  is  validated.  A  test  that  is 
inapplicable  for  one  validation  is  not  necessarily  inapplicable  for  a 
subsequent  validation.  Any  test  that  was  determined  to  contain  an  illegal 
language  construct  or  an  erroneous  language  construct  is  withdrawn  from  the 
ACVC  and,  therefore,  is  not  used  in  testing  a  compiler.  The  tests 
withdrawn  at  the  time  of  this  validation  are  given  in  Appendix  D. 
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CONFIGURATION  INFORMATION 


2.1  CONFIGURATION  TESTED 

The  candidate  compilation  system  for  this  validation  was  tested  under  the 
following  configuration: 

Compiler:  CONVEX  Ada,  Version  1.0 
ACVC  Version:  1.9 
Certificate  Number:  880501W1. 09045 
Host  Computer: 

Machine: 

Operating  System: 

Memory  Size: 

Target  Computer: 

Machine:  CONVEX  C210 

Operating  System;  CONVEX  UNIX 

Version  6.2 

Memory  Size:  64  Mbytes 


CONVEX  C210 

CONVEX  UNIX 
Version  6.2 

64  Mbytes 
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2.2  IMPLEMENTATION  CHARACTERISTICS 

One  of  the  purposes  of  validating  compilers  is  to  determine  the  behavior  of 
9  compiler  in  those  areas  of  the  Ada  Standard  that  permit  implementations 
to  differ.  Class  D  and  E  tests  specifically  check  for  such  implementation 
differences.  However,  tests  in  other  classes  also  characterize  auc 
implementation.  The  tests  demonstrate  the  following  characteristics: 


.  Capacities. 

The  compiler  correctly  processes  tests  containing  loop  statements 
nested  to  65  levels ,  block  statements  nested  to  65  levels ,  and 
recursive  procedures  separately  compiled  as  subunits  nested  to  17 
levels.  It  correctly  processes  a  compilation  containing  723 
variables  in  the  same  declarative  part.  (See  tests  D55A03A. .H  (8 
tests),  D56001B,  D64005E..G  (3  tests),  and  D29002K.) 


.  Universal  integer  calculations. 

An  implementation  is  allowed  to  reject  universal  integer 
calculations  having  values  that  exceed  SYSTEM. MAX^INT.  This 
implementation  processes  64-bit  integer  calculations.  (See  tests 
D4A002A,  D4AU02B,  D4A004A,  and  D4A004B.) 


.  Predefined  types. 

This  implementation  supports  the  additional  predefined  types 
SHORT_INTEGER,  SHORT_FLOAT,  and  TINY  INTEGER  in  the  package 
STANDARD.  (See  tests  B86O01C  and  B86001D.) 


.  Based  literals . 

An  implementation  is  allowed  to  reject  a  based  literal  with  a 
value  exceeding  SYSTEM .MAX_INT  during  compilation,  or  it  may  raise 
NUMERIC_ERROR  or  CONSTRAINT_ERROR  during  execution.  This 
implementation  raises  NDMERIC_ERROR  during  execution.  (See  test 
E24101A.) 


.  Expression  evaluation. 

Apparently  all  default  initialization  values  for  record  components 
are  checked  for  belonging  to  the  component’s  subtype  as  each 
initialization  expression  is  evaluated.  (See  test  C32inA.) 

Assignments  for  subtypes  are  performed  with  the  same  precision  as 
the  base  type.  (See  test  C35712B.) 


2-2 


CONFIGURATION  INFORMATION 


This  implementation  uses  no  extra  bits  for  extra  precision.  This 
implementation  uses  all  extra  bits  for  extra  range.  (See  test 
C35903A.) 

Apparently  NUMERIC_ERROR  is  raised  when  an  integer  literal  operand 
in  a  comparison  or  membership  test  is  outside  the  range  of  the 
base  type.  (See  test  C45232A.) 

Apparently  NUMERIC_ERROR  is  raised  when  a  literal  operand  in  a 
fixed-point  comparison  or  membership  test  is  outside  the  range  of 
the  base  type.  (See  test  C45252A.) 

Apparently  underflow  is  not  gradual.  (See  tests  C4552UA..Z.) 


Rounding . 

The  method  used  for  rounding  to  integer  is  apparently  round  toward 
zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  longest  integer  is  apparently 
round  toward  zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  integer  in  static  universal  real 
expressions  is  apparently  round  to  even.  (See  test  C4A014A.) 


Array  types. 

An  implementation  is  allowed  to  raise  NUMERIC^ERROR  or 
CONSTRAINT_ERROR  for  an  array  having  a  ’LENGTH  that  exceeds 
STANDARD. INTEGER 'LAST  and/or  SYSTEM .MAX_INT .  For  this 
implementation; 

Declaration  of  an  array  type  or  subtype  declaration  with  more  than 
SYSTEM. MAX_INT  components  raises  no  exception.  (See  test 
C36003A.) 

NUMERIC_ERROR  is  raised  when  'LENGTH  is  applied  to  an  array  type 
with  INTEGER'LAST  +  2  components.  (See  test  C36202A.) 

NDMERIC_ERROR  is  raised  when  'LENGTH  is  applied  to  an  array  type 
with  SYSTEM.MAX_INT  2  components.  (See  test  C36202B.) 

A  packed  BOOLEAN  array  having  a  'LENGTH  exceeding  INTEGER'LAST 
raises  NUMERIC_ERROR  when  the  array  type  is  declared.  (See  test 
C52103X.) 

A  packed  two-dimensional  BOOLEAN  array  with  more  than  INTEGER'LAST 
components  raises  NDMERIC_ERROR  when  the  array  subtype  is  declared 
(See  test  C52104Y.) 
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A  null  array  with  one  dimension  of  length  greater  than 
INTEGER 'LAST  may  raise  NUMERIC_ERROR  or  CONSTRAINT_ERROR  either 
when  declared  or  assigned.  Alternatively,  an  implementation  may 
accept  the  declaration.  However,  lengths  must  match  in  array 
slice  assignments.  This  implementation  raises  NUMERIC_ERROR  when 
the  array  type  is  declared.  (See  test  S52103Y.) 

In  assigning  one-dimensional  array  types ,  the  expression  appears 
to  be  evaluated  in  its  entirety  before  CONSTRAINT_ERROR  is  raised 
when  checking  whether  the  expression's  subtype  is  compatible  with 
the  target's  subtype.  In  assigning  two-dimensional  array  types, 
the  expression  does  not  appear  to  be  evaluated  in  its  entirety 
before  CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's  subtype. 
(See  test  C520t3A.) 


.  Discriminated  tynes. 

During  compilation,  an  implementation  is  allowed  to  either  accept 
or  reject  an  incomplete  type  with  discriminants  that  is  used  in  an 
access  type  definition  with  a  compatible  discriminant  constraint. 
This  implementation  accepts  such  subtype  indications.  (See  test 
E3810UA.) 

In  assigning  record  types  with  discriminants,  the  expression 
appears  to  be  evaluated  in  its  entirety  before  CONSTRAINT__ERROR  is 
raised  when  checking  whether  the  expression's  subtype  is 
compatible  with  the  target's  subtype.  (See  test  C52013A.) 


.  Aggregates . 

In  the  evaluation  of  a  multi-dimensional  aggregate,  all  choices 
appear  to  be  evaluated  before  checking  against  the  index  type. 
(See  tests  C43207A  and  C43207B,) 

In  the  evaluation  of  an  aggregate  containing  subaggregates,  all 
choices  are  evaluated  before  being  checked  for  identical  bounds. 
(See  test  E43212B.) 

All  choices  are  evaluated  before  CONSTRAINT_ERROR  is  raised  if  a 
bound  in  a  nonnull  range  of  a  nonnull  aggregate  does  not  belong  to 
an  index  subtype.  (See  test  E43211B.) 

.  Representation  clauses. 

An  implementation  might  legitimately  place  restrictions  on 
representation  clauses  used  by  some  of  the  tests.  If  a 
representation  clause  is  used  by  a  test  in  a  way  that  violates  a 
restriction,  then  the  implementation  must  reject  it. 
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Enumeration  representation  clauses  containing  noncontiguous  values 
for  enumeration  types  other  than  character  and  boolean  types  are 
supported.  (See  tests  C35502I..J,  C35502M..N,  and  A39005F.) 

Enianeration  representation  clauses  containing  noncontiguous  values 
for  character  types  are  supported.  (See  tests  C 35507 I.. J, 
C35507M..N,  and  C55B16A.) 

Enumeration  representation  clauses  for  boolean  types  containing 
representational  values  other  than  (FALSE  =>  0,  TRUE  =>  1)  are 
supported.  (See  testa  C35508I..J  and  C35508M..N.) 

Length  clauses  with  SIZE  specifications  for  enumeration  types  are 
supported.  (See  teat  A39005B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  access  types 
are  supported.  (See  testa  A39005C  amd  C87B62B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  task  types  are 
supported,  (See  tests  A39005D  and  C87B62D.) 

Length  clauses  with  SMALL  specifications  are  supported  only  for 
the  default  representation  values  of  the  base  type.  (See  tests 
A39005E  and  C87B62C.) 

Record  representation  clauses  are  supported,  but  only  if  the 
clause  aligns  the  record  components  on  ST0RAGE__UNIT  boundaries. 
(See  test  A39005G.)  ” 

Length  clauses  with  SIZE  specifications  for  derived  integer  types 
are  supported.  (See  test  C87B62A.) 


Pragmas . 

The  pragma  INLINE  is  supported  for  procedures.  The  pragma  INLINE 
is  supported  for  functions.  (See  tests  LA3004A,  LA3004B,  EA3004C, 
EA3004D,  CA3004E,  and  CA3004F.) 


Input/output . 

The  package  SEQUENTIAL_IO  can  be  instantiated  with  unconstrained 
array  types  and  record  types  with  discriminants  without  defaults. 
(See  tests  AE2101C,  EE2201D,  and  EE2201E.) 

The  package  DIRECT_I0  can  be  instantiated  with  unconstrained  array 
types  and  record  types  with  discriminants  without  defaults.  (See 
tests  AE2101H,  EE2401D,  and  EE2401G.) 

Modes  IN_FILE  and  OUT  FILE  are  supported  for  SEQUENTIAL  10.  (See 
tests  CE2102D  and  CE2To2E.) 
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Modes  IN_FILE,  OUT  FILE,  and  INOUT  FILE  are  supported  for 
DIRECT_I0.  (See  tests  CE2102F,  CE2102I,  and  CE2102J.) 

RESET  and  DELETE  are  supported  for  SEQUENTIAL_IO  and  DIRECT_IO. 
(See  tests  CE2102G  and  CE2102K.) 

Dynamic  creation  and  deletion  of  files  are  supported  for 
SEQUENTIAL_IO  and  DIRECT_IO.  (See  tests  CE2106A  and  CE2106B.) 

Overwriting  to  a  sequential  file  truncates  the  file  to  last 
element  written.  (See  test  CE2208B.) 

An  existing  text  file  can  be  opened  in  OUT_FILE  mode,  can  be 
created  in  OUT_FILE  mode,  and  can  be  created  in  IN  FILE  mode. 
(See  test  EE3102C.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  text  I/O  for  both  reading  and  writing.  (See  tests 
CE3‘niA..E  (5  tests),  CE3114B,  and  CE3115A.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  sequential  I/O  for  both  reading  and  writing.  (See  tests 
CE2107A..D  (4  tests),  CE21103,  and  CE2111D.) 

More  than  one  internal  file  can  be  associated  with  each  external 
file  for  direct  I/O  for  both  reading  and  writing.  (See  tests 
CE2107F..I  (5  tests),  CE2110B,  and  CE2111H.) 

An  internal  sequential  access  file  and  an  internal  direct  access 
file  can  be  associated  with  a  single  external  file  for  writing. 
(See  test  CE2107E.) 

An  external  file  associated  with  more  than  one  internal  file  can 
be  deleted  for  SEQUENTIAL_IO ,  DIRECT_IO,  and  TEXT  10.  (See  test 
CE2110B.) 

Temporary  sequential  files  are  given  names.  Temporary  direct 
files  are  given  names.  Temporary  files  given  names  au*e  deleted 
when  they  are  closed.  (See  tests  CE2108A  and  CE2108C.) 


.  Generics . 

Generic  subprogram  declarations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  tests  CA1012A  and  CA2009F.) 

Generic  package  declau"ations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  tests  CA2009C,  BC3204C,  and  BC3205D.) 

Generic  unit  bodies  and  their  subunits  can  be  compiled  in  separate 
compilations.  (See  test  CA3011A.) 
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3.1  TEST  RESULTS 

Version  1.9  of  the  ACVC  comprises  3122  tests.  When  this  compiler  was 
tested,  27  tests  had  been  withdrawn  because  of  test  errors.  The  AVF 
determined  that  226  testa  were  inapplicable  to  this  implementation.  All 
inapplicable  testa  were  processed  during  validation  testing  except  for  201 
executable  tests  that  use  floating-point  precision  exceeding  that  supported 
by  the  implementation.  Modifications  to  the  code,  processing,  or  grading 
for  25  testa  were  required  to  successfully  demonstrate  the  test  objective. 
(See  section  3* 6*) 

The  AVF  concludes  that  the  testing  results  demonstrate  acceptable 
conformity  to  the  Ada  Standard. 


3.2  SUMMARY  OF  TEST  RESULTS  BY  CLASS 


RESULT 

A 

B 

TEST 

C 

CLASS 

D 

E 

L 

TOTAL 

Passed 

109 

1049 

1630 

17 

18 

46 

2869 

Inapplicable 

1 

2 

223 

0 

0 

0 

226 

Withdrawn 

3 

2 

21 

0 

1 

0 

27 

TOTAL 

113 

1053 

1874 

17 

19 

46 

3122 
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3.3  SUMMARY  OF  TEST  RESULTS  BY  CHAPTER 


RESULT 

2 

3 

4 

5 

6 

CHAPTER 

7  8  9 

10 

11 

12 

13 

14 

TOTAL 

Passed 

190 

499 

540 

245 

K6 

98 

142  326 

137 

36  234 

3 

253 

2869 

Inapplicable 

14 

73 

134 

3 

0 

0 

1  1 

0 

0 

0 

0 

0 

226 

Withdrawn 

2 

14 

3 

0 

0 

1 

2  0 

0 

0 

2 

1 

2 

27 

TOTAL 

206  586 

677 

248 

166 

99 

145  327 

137 

36  236 

4 

255 

3122 

3.4 

The 

WITHDRAWN  TESTS 

following  27  tests  were  withdrawn  from  ACVC  Version  1.9  at  the  time  of 

this 

1  validation: 

B28003A  E28005C 

C34004A 

C35502P 

A35902C 

C35904A 

C35904B 

C35A03E 

C35A03R 

C37213H 

C37213J 

C37215C 

C37215E 

C37215G 

C37215H 

C38102C 

C41402A 

C45332A 

C45614C 

A74106C 

C85018B 

C87B04B 

CCI31IB 

BC3105A 

AD1A01A 

See 

CE2401H 

Appendix  D 

CE3208A 

for  the  reason  that  each 

of  these 

tests  was  withdrawn. 

3.5  INAPPLICABLE  TESTS 

Some  tests  do  not  apply  to  all  compilers  because  they  make  use  of  features 
that  a  compiler  is  not  required  by  the  Ada  Stamdard  to  support.  Others  may 
depend  on  the  result  of  another  test  that  is  either  inapplicable  or 
withdravm.  The  applicability  of  a  test  to  an  implementation  is  considered 
each  time  a  validation  is  attempted.  A  test  that  is  inapplicable  for  one 
validation  attempt  is  not  necessarily  inapplicable  for  a  subsequent 
attempt.  For  this  validation  attempt,  226  tests  were  inapplicable  for  the 
reasons  indicated: 


.  A39005G  uses  a  record  representation  clause  which  doesn't  align  on 

STORAGE_UNIT  boundaries. 

•  C35702B  uses  LONG_FLOAT  which  is  not  supported  by  this 

implementation . 
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.  The  following  13  tests  use  LONG^INTEGER,  which  is  not  supported  by 
this  compiler: 

C45231C  C45304C  C45502C  C45503C  C45504C 

C45504F  C45611C  C45613C  C45631C  C45632C 

B52004D  C55B07A  B55B09C 

.  C45531M,  C45531N,  C45532M,  and  C45532N  use  fine  48-bit  fixed-point 

base  types  which  are  not  supported  by  this  compiler. 

.  C455310,  C45531P,  C455320,  and  C45532P  use  coarse  48-bit 

fixed-point  base  types  vrtiich  are  not  supported  by  this  compiler. 

.  C86001F  redefines  package  SYSTEM,  but  TEXT_I0  la  made  obsolete  by 

this  new  definition  in  this  implementation  and  the  test  cannot  be 
executed  since  the  package  REPORT  is  dependent  on  the  package 
TEXT_I0. 

.  C96005B  requires  the  range  of  type  DURATION  to  be  different  from 

those  of  its  base  type;  in  this  implementation  they  are  the  same. 

.  The  following  201  tests  require  a  floating-point  accuracy  that 
exceeds  the  maximum  of  15  digits  supported  by  this  implementation: 

C24113L..Y  (14  tests)  C35705L. .Y  (14  tests) 

C35706L..Y  (14  testa)  C35707L..Y  (14  tests) 

C35708L..Y  (14  tests)  C35802L..Z  (15  tests) 

C45241L..Y  (14  tests)  C45321L..Y  (14  tests) 

C45421L..Y  (14  tests)  C45521L..Z  (15  tests) 

C45524L..Z  (15  tests)  C45621L..Z  (15  tests) 

C45641L,.Y  (14  tests)  C46012L..Z  (15  tests) 


3.6  TEST,  PROCESSING,  AND  EVALUATION  MODIFICATIONS 

It  is  expected  that  some  tests  will  require  modifications  of  code, 
processing,  or  evaluation  in  order  to  compensate  for  legitimate 
implementation  behavior.  Modifications  are  made  by  the  AVF  in  cases  where 
legitimate  Implementation  behavior  prevents  the  successful  completion  of  an 
(otherwise)  applicable  test.  Examples  of  such  modifications  include: 
adding  a  length  clause  to  alter  the  default  size  of  a  collection;  splitting 
a  Claiss  B  test  into  subtesta  so  that  all  errors  are  detected;  and 
confirming  that  messages  produced  by  an  executable  test  demonstrate 
conforming  behavior  that  wasn’t  anticipated  by  the  test  (such  as  raising 
one  exception  Instead  of  another). 

Modifications  were  required  for  25  Class  B  tests. 
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The  following  25  Class  B  tests  were  split  because  syntax  errors  at  one 
point  resulted  in  the  compiler  not  detecting  other  errors  in  the  test: 


324009A 

B24204A 

B24204B 

B24204C 

B2A003A 

B2A003B 

B2A003C 

B33301A 

B37201A 

B38003A 

B38003B 

B38009A 

B38009B 

B44001A 

B64001A 

B67001A 

B67001B 

B67001C 

B67001D 

B91001H 

B91003B 

B95001A 

B97102A 

BC1303F 

BC3005B 

3.7  ADDITIONAL  TESTING  INFORMATION 
3.7.1  Prevalidation 

Prior  to  validation,  a  set  of  test  results  for  ACVC  Version  1.9  produced  by 
the  CONVEX  Ada  compiler  was  submitted  to  the  AVF  by  the  applicant  for 
review.  Analysis  of  these  results  demonstrated  that  the  compiler 
successfully  passed  all  applicable  tests,  and  the  compiler  exhibited  the 
expected  behavior  on  all  inapplicable  tests. 


3.7.2  Test  Method 

Testing  of  the  CONVEX  Ada  using  ACVC  Version  1.9  was  conducted  on-site  by  a 
validation  team  from  the  AVF.  The  configuration  consisted  of  a  CONVEX  C210 
operating  under  CONVEX  UNIX,  Version  6.2.  .  . 

A  magnetic  tape  containing  all  tests  was  taken  on-site  by  the  validation 
team  for  processing.  Tests  that  make  use  of  implementation-specific  values 
were  customized  before  being  written  to  the  magnetic  tape.  Tests  requiring 
modifications  during  the  prevalidation  testing  were  included  in  their 
modified  form  on  the  magnetic  tape. 

The  contents  of  the  magnetic  tape  were  loaded  directly  onto  the  host 
computer.  After  the  teat  files  were  loaded  to  disk,  the  full  set  of  tests 
was  compiled  on  the  CONVEX  C210,  and  all  executable  tests  were  linked  and 
r\in  on  the  CONVEX  C210.  Results  were  printed  from  the  host  computer. 

The  compiler  was  tested  using  command  scripts  provided  by  CONVEX  Computer 
Corporation  and  reviewed  by  the  validation  team.  The  compiler  was  tested 
using  all  default  switch  settings  except  for  the  following; 

Switch  Effect 

-w  Suppress  compilation  warnings. 

-M  Indicate  main  program  unit,  for  single-source  compiles. 


Tests  were  compiled,  linked,  and  executed  (as  appropriate)  using  a  single 
host  computer.  Test  output,  compilation  listings,  and  Job  logs  were 
captured  on  magnetic  tape  and  archived  at  the  AVF.  The  listings  examined 
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on-site  by  the  validation  team  were  also  archived. 

3.7.3  Test  Site 

Testing  was  conducted  at  Richardson ,  TX  and  vas  completed  on  2  May  1988. 
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DECURATION  OF  CONFORMANCE 


CONVEX  Computer  Corporation  has  submitted  the  following 
Declaration  of  Conformance  concerning  the  CONVEX  Ada 
Compiler. 
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DECLARATION  OF  CONFORMANCE 


Compiler  Implementor;  CONVEX  Computer  Corporation 
Ada  Validation  Facility:  Ada  Validation  Facility, 

ASD/SCEL  Wright  Patterson  AFB  OH  45433-6503 
Ada  Compiler  Validation  Capability  (ACVC)  Version:  1.9 

Base  Configuration 

Base  Compiler  Name;  CONVEX  Ada  Version;  1.0 

Host  Architecture  ISA:  CONVEX  C-Series  OS&VER  #;  CONVEX  UNIX  Version  6.2 
Target  Architecture  ISA:  CONVEX  C-Series  OS&VER  #:  CONVEX  UNIX  Version  6.2 
Performed  On:  CO.NVEX  C-210 


Derived  Compiler  Registration 


Derived  Compiler  Name;  CONVEX  Ada 
Host  Architecture  ISA;  CONVEX  C-Series 
Target  Architecture  ISA;  CONVEX  C-Series 
Performed  On;  CO.NVEX  C-130 


Version:  1.0 

OS&VER  #:  CONVEX  UNDC  Version  6.2 
OS&VER  #:  CONVEX  UNDC  Version  6.2 


Derived  Compiler  Registration 


Derived  Compiler  Name:  CONVEX  Ada 
Host  Architecture  ISA:  CONVEDC  C-Series 
Target  Architecture  ISA;  CONVEX  C-Series 
Performed  On:  CONVEX  C-120 


Version:  1.0 

OS&VER  #  :  CONVEX  UNIX  Version  6.2 
OS&VER  #;  CONVEX  UNDC  Version  6.2 


Implementor’s  Declaration 

I,  the  undersigned,  representing  CONVEX  Computer  Corporation,  have  implemented  no  deliberate 
extensions  to  the  Ada  Language  Standard  ANSI/MIL-STO.ISISA  in  the  compiler(s)  listed  in  this 
declaration.  I  declare  that  CONVEX  Computer  Corporation  is  the  owner  of  record  of  the  Ada 
language  compiler(s)  listed  above  and,  as  such,  is  responsible  for  maintaining  said  compiler(s)  in 
conformance  to  ANSI/MIL-STD-1815A.  All  certificates  and  registrations  for  Ada  language 
compiler(s)  listed  in  this  declaration  shall  be  made  only  in  the  owner’s  corporate  name. 


Frank  J.  Klarshall,  Vice  President  May  2nd,  1988 


Owner’s  Declaration 

I,  the  undersigned,  representing  CONVEX  Computer  Corporation  take  full  responsibility  for 
implementation  and  maintenance  of  the  Ada  compilcr(5)  listed  above,  and  agree  to  public  disclosure 
of  the  final  Validation  Summary  Report.  I  further  agree  to  continu  to  comply  with  the  Ada 
trademark  policy,  as  defined  by  the  Ada  Joint  Program  Office.  I  declare  that  all  of  the  Ada  language 
compilers  listed,  and  their  host/target  performance  are  in  compliance  with  the  Ada  Language 
Standard  ANSI/MIL-STD-1815A.  I  have  reviewed  the  Validation  Summary  Report  for  the 
compiler(s)  and  concur  with  the  contents. 

Frank  J.  Marshall,  Vice  President 


May  2nd,  1988 
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APPENDIX  F  OF  THE  Ada  STANDARD 


The  only  allowed  implementation  dependencies  correspond  to  implementation- 
dependent  pragmas,  to  certain  machine-dependent  conventions  as  mentioned  in 
Chapter  13  of  the  Ada  Standard,  and  to  certain  allowed  restrictions  on 
representation  clauses.  The  implementation-dependent  characteristics  of 
the  CONVEX  Ada,  Version  1.0,  are  described  in  the  following  sections,  which 
discuss  topics  in  Appendix  F  of  the  Ada  Standard.  Implementation-specific 
portions  of  the  package  STANDARD  are  also  included  in  this  appendix. 


package  STANDARD  is 

•  •  • 

type  INTEGER  is  range  -2JU7_483_648  ..  2J47_483_647; 

type  SH0RT_INTEGER  is  range  -32_768  ..  32767; 

type  TINY_INTEGER  is  range  -128  ..  127; 

type  FLOAT  is  digits  15  range 

-8.98846567431156E+307  ..  8. 98846567431 156E+307; 

type  SHORT_FLOAT  is  digits  6  range  - 1.701 41 E+38  ..  1.70141E+38; 

type  DURATION  is  delta  6. 103515625E-05  range  -131072.0  ..  131071.99993; 


end  STANDARD; 
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4.1.1  Implementation- Dependent  Pragmas 

CONVEX  Ada  supports  the  following  implementation-dependent  pragmas: 

EXTERNAL.NAME 

Tliis  pragma  takes  the  name  of  a  subprogram  or  variable  defined  in  Ada  and  allows  the  user  to 
specify  a  different  external  name  that  may  be  used  to  reference  the  entity  from  other  languages. 
'!^e  pragma  is  allowed  at  the  place  of  a  declarative  item  in  a  package  specification  and  must 
apply  to  an  object  declared  earlier  in  the  same  package  specification. 

INTERFACE_OBJECT 

This  pragma  takes  the  name  of  a  variable  defined  in  another  language  and  allows  it  to  be 
referenced  directly  in  Ada.  The  pragma  replaces  ail  occurrences  of  the  variable  name  with  an 
external  reference  to  the  second  {Hnk^argvment).  The  pragma  is  allowed  at  the  place  of  a 
declarative  item  in  a  package  specification  and  must  apply  to  an  object  declared  earlier  in  the 
same  package  specification.  The  object  must  be  declar^  as  a  scalar  or  an  access  type.  The 
object  cannot  be  any  of  the  following: 

•  A  loop  variable 

•  A  constant 

•  An  initialized  variable 

•  An  array 

•  A  record 

IMPUCTT.CODE 

This  pragma  takes  one  of  the  identifiers  ON  or  OFF  as  the  single  argument.  This  pragma  is  only 
allowed  within  a  machine  code  procedure.  It  specifies  whether  implicit  code  generated  by  the 
compiler  is  to  be  allowed  or  disallowed.  A  warning  is  issued  if  OFF  is  used  and  any  implicit  code 
needs  to  be  generated.  The  default  value  is  ON. 

NOJIECXJRRENCE 

This  pragma  instructs  the  compiler  to  vectorize  a  loop  even  if  the  compiler  cannot  prove  there  are 
no  recurrence  vector  dependencies  in  the  loop.  If  the  loop  does  in  fact  contain  recurrences,  and 
the  NO  JIECURRENCE  pragma  is  specified,  incorrect  code  may  be  generated. 

The  NO.JIECUIIRENCE  pragma  statement  must  immediately  precede  the  for  or  while  loop  to 
wuich  it  applies.  If  the  pragma  is  to  apply  to  a  hand  written  loop,  the  pragma  must  appear 
immediately  before  the  labeled  statment  at  the  head  of  the  band  written  loop. 

NO_SIDE_EFFECTS 

This  pragma  informs  the  compiler  that  the  subprogram  being  compiled  does  not  change  the  value 
of  any  global  objects.  The  compilers  optimizer  can  then  move  operations  on  such  variables  across 
calls  to  the  subprogram. 

The  pragma  must  appear  in  the  declarative  part  of  a  function  or  procedure. 

SCALAR 

This  pragma  prevents  vectorization  of  the  loop  that  follows.  The  pragma  SCALAR  statement 
must  immediately  precede  the  for  or  while  loop  to  which  it  applies.  If  the  pragma  is  to  apply  to 
a  hand  written  Ioop|,  the  pragma  must  appear  immediately  before  the  labeled  statment  at  the 
head  of  the  hand  written  loop. 
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Loops  nested  within  a  loop  that  has  the  SCALAR  pragma  applied  to  it  are  eligible  for 
vectorization. 

SCALAR_UNrT 

This  pragma  may  appear  any  place  in  the  deciarative  part  of  a  Ubrary  unit.  It  informs  the 
compiler  that  no  vectorization  is  to  be  performed  on  the  umt.  The  SCALAR_UNTr  pragma 
overrides  the  command  line  Eags  of  the  compilation.  Only  one  SCALAR_UNIT  or 
VECTOR.UNIT  pragma  may  appear  in  a  library  unit.  Any  subsequent  SCALAR_UNrr  or 
VECTOR.UNTT  pragmas  are  flagged  as  errors  and  ignored. 

SHAHEJODY 

This  pragma  takes  the  name  of  a  generic  instantiation  or  a  generic  unit  as  the  flrst  argument  and 
one  of  the  identifiers  TRUE  or  FALSE  as  the  second  argument.  This  pragma  is  only  allowed 
immediately  at  the  place  of  a  declarative  item  in  a  declarative  part  or  package  specification,  or 
after  a  library  unit  in  a  compilation,  but  before  any  subsequent  compilation  unit. 

When  the  flrst  argument  is  a  generic  unit,  the  pragma  applies  to  all  instantiations  of  that  generic. 
When  the  first  argument  is  the  name  of  a  generic  instantiation,  the  pragma  applies  oniy  to  the 
specified  instantiation  or  overloaded  instantiations. 

If  the  second  argument  is  TRUE,  the  compiler  tries  to  share  code  generated  for  a  generic 
instantiation  with  code  generated  for  other  instantiations  of  the  same  generic.  When  the  second 
argument  is  F-ALSE,  each  instantiation  gets  a  unique  copy  of  the  generated  code.  The  extent  to 
which  code  is  shared  between  instantiations  depends  on  this  pragma  and  the  kind  of  generic 
formal  parameters  declared  for  the  generic  unit. 

VECTOR.UNIT 

This  pragma  may  appear  any  place  in  the  deciarative  part  of  a  libraiy*  unit.  It  informs  the 
compiler  that  library  unit  b  a  candidate  for  vectorization.  Loops  within  the  library  unit  are 
analyzed  and  those  that  have  no  recurrence  vector  dependencies  are  vectorized.  The  compiler  can 
be  forced  to  vectorize  a  loop  even  if  recurrence  dependencies  exbt  with  the  NO_RECXJRRENCE 
pragma.  The  VECTOR_UNIT  pragma  overrides  the  command  line  flags  of  the  compilation. 
Only  one  SCALAR_UNIT  or  VECTOR.UNIT  pragma  may  appear  in  a  library  unit.  Any 
subsequent  SCALAR.UNTT  or  VECTOR.UNIT  pragmas  are  flagged  as  errors  and  ignored. 


4.1.2  Implementation  of  Predefined  Pragmas 

CONVEX  Ada  implements  the  predefined  pragmas  as  follows. 

CONTROLLED 

Thb  pragma  b  recognized  by  the  compiler  but  has  no  effect. 

ELABORATE 

Thb  pragma  b  implemented  as  described  in  Appendix  B  of  the  Ada  reference  manual. 

INLINE 

Thb  pragma  b  implemented  as  described  in  .Appendix  B  of  the  Ada  reference  manual. 
INTERFACE 

Thb  pragma  supports  calb  to  C  and  FORTRAN  functions.  The  Ada  subprograms  can  either  bd 
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fuactioDs  or  procedures.  The  types  of  parameters  and  the  result  type  for  functions  must  be 
scalar,  access,  or  the  predefined  type  ADDRESS  in  SYSTEM.  An  optional  third  ar^ment 
overrides  the  default  link  name.  All  parameters  must  have  mode  IN.  Record  and  array  objects 
can  be  passed  by  reference  using  the  ADDRESS  attribute.  . 

LIST 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  reference  manual. 
MEMORY.SIZE 

This  pragma  is  recognized  by  the  compiler  but  has  no  effect.  The  implementation  does  not  allow 
SYSTEM  to  be  modified  by  pragmas;  the  SYSTEM  package  must  be  recompiled. 

OPTIMIZE 

This  pragma  is  recognized  by  the  compiler  but  has  no  effect. 

PACK 

This  pragma  causes  the  compiler  to  choose  a  non-aligned  representation  for  composite  t^iies  but 
does  not  cause  objects  to  be  packed  at  the  bit  level. 

PAGE 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  reference  manual. 
PRIORITY 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  reference  manual. 

SHARED 

This  pragma  is  recognized  by  the  compiler  but  has  no  effect. 

STORAGE.UNTT 

This  pragma  is  recognized  by  the  compiler  but  has  no  effect.  The  implementation  does  not  allow 
SYSTEM  to  be  modified  by  pragmas;  the  SYSTEM  package  must  be  recompiled. 

SUPPRESS 

This  pragma  b  implemented  as  described  in  Appendix  B  of  the  Ada  reference  manual  except  that 
RANGE_CHECK  and  DrVISION_CHECK  cannot  be  suppressed. 

SYSTEM_NAME 

Thb  pragma  b  recognized  by  the  compiler  but  has  no  effect.  The  implementation  does  not  allow 
SYSTEM  to  be  modified  by  pragmas;  the  SYSTEM  package  must  be  recompiled. 
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4.1.3  Implementation-Dependent  Attributes 

CONVEX  Ada  provides  the  implemeatatioa>depeQdeat  attribute  P’REF,  where  P  can  represent 
an  object,  a  program  unit,  a  label,  or  an  entry. 

This  attribute  denotes  the  effective  address  of  the  first  of  the  storage  units  allocated  to  P.  For  a 
subprogram,  package,  task  unit,  or  label,  it  refers  to  the  address  of  the  machine  code  associated 
with  the  corresponding  body  or  statement.  For  an  entry  for  which  an  address  clause  has  been 
given,  it  refers  to  the  corresponding  hardware  interrupt. 

This  attribute  is  of  type  OPERAND  as  defined  in  the  package  MACHINE.CODE  and  is  only 
allowed  within  a  machine  code  procedure.  This  attribute  is  not  supported  for  a  package,  task 
unit,  or  entry. 
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4.1.4  Specification  of  the  Package  SYSTEM 

The  specifieatioa  of  the  package  SYSTEM  is  shown  below.  This  specification  is  available  online 
in  the  file  a^attm.a  in  the  atandard  libraiy. 

paekag*  SYSTEM 
Is 

t7p«  hake:  Is  (  coiiT«x_anlz  } : 

SYSTE11_HAKE  :  constant  HAKE  conT«z_nalz: 

ST011AGE_UHIT  :  constant  :»  8: 

IlE!0RY_il2E  :  constant  :*  1B_7T7_218; 

~  Sjstea-Oapandnnt  NaaeC  Nnabtrs 

MlH_Iirr  :  constant  ;*  -2_ia7_483_84a: 

MAx’iMT  :  constant  :»  2_U7_jB3_a47; 

KAX_DIG1TS  :  constant  :s  16: 

MAx'kAHTISSA  ;  constant  3i: 

FTNE_0n.7A  ;  constant  ;=  2.0»»(-31): 

TICK  :  constant  0.01 ; 

—  Otbar  Systna-dnpandnnt  Dnclaratlons 

snbtYp*  PRIORITY  is  TSTESES,  rang#  0  ..  90: 

I1AX_REC_SI2E  :  latsgnr  ;=  64-1024; 

tjpn  ADDRESS  Is  prlTatn: 

KO^AOOR  :  constant  ADDRESS: 

Innctlon  PKYSICAL_ADORESS (I :  INTEGER}  rntnrt  ADDRESS; 

Inaction  ADDR_GT(A.  8:  ADDRESS}  rntnrt  BOOLEAN; 

Innctlon  ADDrTtcA.  B:  ADDRESS}  rntnrt  BOOLEAN: 

Innctlon  AOOR~GE(A.  B:  ADDRESS)  rntnrt  BOOLEAN: 

Inaction  ADDr'leCA.  B;  ADDRESS)  rntnrt  BOOLEAN; 

Inaction  AODR"DtFT(A,  S:  ADDRESS)  rntnrt  INTEGER; 

Innctlon  INCR~ADDR(A:  ADDRESS;  INCR:  INTEGER)  rntnrt  ADDRESS: 

Inaction  OECR_ADOR(A:  ADDRESS;  DECS:  INTEGER)  rntnrt  ADDRESS; 

Inactloa  '^'CA.  B:  ADDRESS)  rntnrt  BOOLEAN  rnaaans  AD0R_CT: 

Inaction  '<'(A.  B:  ADDRESS)  rntnrt  BOOLEAN  rnaaans  ADDR_LT; 

Inaction  B:  ADDRESS)  rntnrt  BOOLEAN  rnnaans  ADDR_GE; 

inactloa  'c'lA,  B:  ADDRESS)  rntnrt  BOOLEAN  rnnaans  AODr'lE: 
inactloa  '-'(A.  B:  ADDRESS)  rntnrt  INTEGER  rnnaans  ADDR^DITT; 

Inactloa  *'»*<A:  ADDRESS;  INCR:  INTEGER)  rntnrt  ADDRESS  rnaaans  INCR^ADDR; 
inactloa  *-*(A:  ADDRESS;  DECS:  INTEGER)  rntnrt  ADDRESS  rnaaans  DECR^ADOR; 

pragaa  lallan(ADDR_CT) : 
pragaa  iallBn(AODR_LT); 
pragaa  lallan(ADDR_G£) ; 
pragaa  lallanCADDR^LE) ; 
prngaa  lBllBn(ADDR_OIFT) ; 
pragaa  lallanllNCR^ADDR) ; 
pragaa  lallanCDECR^ADOR) ; 
pragaa  Inllan (PHYSICAL  ADDRESS): 
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prlTst* 


tfp*  address  is  b«v  lBt«R«r: 
NO_ADDR  :  CODSBUt  ADDRESS  :«  0; 

•B«  SYSTEM: 


4.1.5  Restrictions  on  Representation  Clauses 

This  section  describes  the  restrictions  on  representation  clauses  in  CONVEX  Ada. 

Pragma  PACK 

Bit  packing  is  not  supported.  Objects  and  larger  components  are  packed  to  the  nearest  whole 
STORAGE_UNIT. 

Slxe  Specification. 

The  size  specification  T'SMALX.  is  not  supported  except  when  the  representation  specification  is 
the  same  as  the  value  'SMALL  for  the  base  type. 

Record  Representation  Clauses 

Components  clauses  must  be  aligned  on  STORAGE^UNTT  boundaries. 

Address  Clauses 

Address  clauses  are  supported  for  variables  and  constants. 

Interrupts 

Interrupt  entries  are  supported  for  UNIX  signals.  The  Ada  far  clause  gives  the  UNIX  signal 
number. 

Representation  Attributes 

The  .ADDRESS  attribute  is  not  supported  for  the  following  entities: 

•  Packages 

•  Tasks 

•  Labels 

•  Entries 

Machine-Code  Insertions 

Machine-code  insertions  are  supported.  The  general  definition  of  the  package  MACHINE.CODE 
provides  an  assembly-language  interface  for  the  target  machine.  This  package  provides  the 
necessary  record  types  needed  in  the  code  statement,  an  enumeration  type  of  all  the  opcode 
mnemonics,  a  set  of  register  definitions,  and  a  set  of  addressing  mode  functions. 

The  general  syntax  of  a  machine  code  statement  is  as  follows: 

caDE_Q‘  (opeoCe,  optraad  C.op«rBadl  ): 

The  parameter  n  indicates  the  number  of  operands  in  the  aggregate.  A  special  case  arises  for  a 
variable  number  of  operands.  The  operands  are  listed  within  a  subaggregate  in  the  following 
format: 
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CaOE_ii‘  (opcodt.  (op«rMd  [.operand]  )); 

For  those  opcodes  that  require  no  operands,  named  notation  must  be  used.  The  format  is  as 
follows: 

CflDE_0’  (op  opcode); 

The  opcode  must  be  an  enumeration  literal;  it  cannot  be  an  object,  attribute,  or  rename.  An 
operand  can  only  be  an  entity  defined  in  the  package  MACHINE.COOE  or  with  the  ’REF 
attribute. 

The  arguments  to  any  of  the  functions  define  in  MACHINE.CODE  must  be  static  expressions, 
string  Uterals,  or  the  functions  defined  in  MACHINE.CODE.  The  attribute  ’REF  may  not  be 
used  as  an  argument  in  any  of  these  functions.  Inline  expansion  of  machine  code  procedures  is 
supported. 


4.1.6  Conventions  for  Implementation- Generated  Names 

There  are  no  implemenution-generated  names. 


4.1.7  Interpretation  of  Expressions  in  Address  Clauses 

Address  clauses  are  supported  for  constants  and  variables.  Interrupt  entries  are  specified  with  the 
number  of  the  UNIX  signal. 


4.1.8  Restrictions  on  Unchecked  Conversions 

There  are  no  restrictions  on  unchecked  conversions. 

4.1.9  Restrictions  on  Unchecked  Deallocations 

There  are  no  restrictions  on  unchecked  deallocations. 


4.1.10  Implementation  Characteristics  of  I/O  Packages 

Instantiations  of  DIRECT_IO  use  the  value  MAX_REC,SIZE  as  the  record  size  (expressed  in 

ST0RAGE_UNITS)  when  the  size  of  ELEMENT_TYPE  exceeds  that  value.  For  example,  for 

unconstrained  arrays  such  as  string,  where  ELEMENT.TYPE’SIZE  is  very  large, 

MAXJflEC_SIZ£  is  used  instead.  MAXJIEC.SIZE  is  defined  in  SYSTEM  and  can  be  changed  by 
a  program  before  DIRECTJO  is  instantiated  to  provide  an  upper  limit  on  the  record  size.  In  any 
case,  the  maximum  size  supported  is  1024  x  1024  x  STORAGE.UNIT  bits.  DERECTJO  raises 
USEJEIRROR  if  MAXJIEC_SIZE  exceeds  this  absolute  limit. 

Instantiations  of  SEQUENTlAL_IO  use  the  value  MAX_REC_SIZ£  as  the  record  size  (expressed 
in  STORAGE_UNITS)  when  the  size  of  ELEMENT_TYPE  exceeds  that  value.  For  example,  for 
unconstrained  arrays  such  as  string,  where  ELEMENT_TYPE’SI2E  is  very  large. 

MAXJ^ZC_SIZE  is  used  instead.  MAXJIEC_SIZE  is  defined  in  SYSTEM  and  can  be  changed  by 
a  program  before  instantiating  INTEGER_IO  to  provide  an  upper  limit  on  the  record  size. 
SEQUENTIAL  JO  imposes  no  limit  on  MAX_REC_SIZE. 
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APPENDIX  C 


TEST  PARAMETERS 


Certain  tests  in  the  ACVC  make  use  of  implementation-dependent  values,  such 
as  the  maximum  length  of  an  input  line  and  invalid  file  names.  A  test  that 
makes  use  of  such  values  is  identified  by  the  extension  .TST  in  its  file 
name.  Actual  values  to  be  substituted  are  represented  by  names  that  begin 
with  a  dollar  sign.  A  value  must  be  substituted  for  each  of  these  names 
before  the  test  is  run.  The  values  used  for  this  validation  are  given 
below. 


Name  and  Meanins 


Value 


$BIG_ID1  (I..498  s>'A',  499  s>’1*) 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  last  character. 


$BIG_ID2  (I..498  =>»A’,  499  =>’2») 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  leist  character. 


$BIG_ID3  (1..249  I  251.. 499  =>’A’,  250  =>»3’) 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  middle  character. 


$BIG_ID4  (1..249  1  251. .499  s>'A’,  250  =>*4*) 

Identifier  the  size  of  the 
maximum  input  line  length  with 
varying  middle  character. 


$BIG_INT_LIT  (I..496  =>'0',  497.. 499  =>"298'’) 

An  integer  literal  of  value  298 
with  enough  leading  zeroes  so 
that  it  is  the  size  of  the 
maximiJDn  line  length. 
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TEST  PARAMETERS 


Name  and  Meaning _ 

$BIG_REAL_LIT 

A  universal  real  literal  of 

value  690.0  with  enough  leading 
zeroes  to  be  the  size  of  the 
maximum  line  length. 

$BIG_STRING1 

A  string  literal  which  when 

catenated  with  BIG_STRING2 
yields  the  image  of  BIG_ID1. 

$BIG_STRING2 

A  string  literal  which  when 

catenated  to  the  end  of 
BIG_STRING1  yields  the  image  of 
BIG_ID1 . 

$BLANKS 

A  sequence  of  blanks  twenty 
characters  less  than  the  size 

of  the  maximum  line  length. 


Value _ _ 

(1..493  =>'0',  49^1. .499  r>"69.0E1") 


(1..250  =>’A') 


(1..248  =>'A’,  249  =>'1') 


(1..479  =>•  ') 


$C0UNT_LAST 

A  universal 

literal  whose 
TEXT_I0. COUNT ’LAST 

$FIELD_LAST 

A  universal 

literal  whose 
TEXT  10. FIELD 'LAST 


2  J  47383.647 

integer 
value  is 

2 J 47.483.647 

.  integer 
value  is 


$FILE.NAME_WITH.BAD.CHARS  ’’/illegal/ file_name/2  { ]$%  21 02C  .DAT" 

An  external  file  name  that 
either  contains  invalid 

characters  or  is  too  long. 


$FILE.NAME.WITH.WILD.CARD.CHAR 

An  external  file  name  that 
either  contains  a  wild  card 
character  or  is  too  long. 

$GREATER.THAN_DURATION 

A  universal  real  literal  that 
lies  between  DURATION 'BASE ’LAST 
and  DURATION ’LAST  or  any  value 
in  the  range  of  DURATION. 


"/illegal/ file_name/CE2102C». DAT" 


100  000.0 
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TEST  PARAMETERS 


Value 


$GREATER_THAN_DURATION_BASE_LAST  1 0_000_000 . 0 

A  universal  real  literal  that  is 
greater  than  DURATION 'BASE ’LAST. 


$ILLEGAL_EXTERNAL_FILE_NAME1  "/no/such/directory/ILLEGAL_EXTERNAL_FILE_NAME‘ 

An  external  file  name  which 
contains  invalid  characters. 


$ILLEGAL_EXTERNAL_FILE_NAME2  •»/no/such/directory/ILLEGAL_EXTERNAL_FILE_NAME2 

An  external  file  name  which 
is  too  long . 

$INTEGER_FIRST  -21U7483648 

A  universal  integer  literal 
whose  value  is  INTEGER 'FIRST. 


$INTEGER_LAST  214748364? 

A  universal  integer  literal 

whose  value  is  INTEGER 'LAST. 

$INTEGER_LAST_PLUS_1  2_147_483_648 

A  universal  ”  integer  literal  ” 

whose  value  is  INTEGER 'LAST  +  1. 

$LESS_THAN__DURATION  -1 00^000.0 

A  universal  real  literal  that 
lies  between  DURATION 'BASE 'FIRST 
and  DURATION 'FIRST  or  any  value 
in  the  range  of  DURATION. 

$LESS_THAN_DURATION_BASE_FIRST  - 1 0_000_000 . 0 

A  universal  real  literal  that  is 
less  than  DURATION 'BASE 'FIRST. 

$MAX_DIGITS  15 

Maximum  digits  supported  for 
floating-point  types . 

$MAX_IN_LEN  499 

Maximum  input  line  length 
permitted  by  the  implementation. 

$MAX_INT  2147483647 

A  universal  integer  literal 

whose  value  is  SYSTEM. MAX_INT. 

$MAX_INT_PLUS__1  2J  47_4  83__64  8 

A  universal  integer  literal  ~ 

whose  value  is  SYSTEM.MAX  INT+1. 
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TEST  PARAMETERS 


Name  and  Meaning _  Value _ 

$MAX_LEN_INT_BASED_LITERAL  (1..2  =>"2;",  3.-496  =>»0’,  497.. 499  =>  "11:") 

A  universal  Integer  based 
literal  whose  value  is  2#11# 
with  enough  leading  zeroes  in 
the  mauitissa  to  be  MAX__IN__LEN 
long. 


$MAX_LEN_REAL_BASED_LITERAL  (1..3  =>"l6:",  4..U95  =>'0*,  496. .499  =>"F.E:"1 

A  universal  real  baaed  literal 
whose  value  is  16:F.E:  with 
enough  leading  zeroes  in  the 
mauitissa  to  be  MAX_IN_LEN  long. 

$MAX_STRING_LITERAL  (1  =>»"*,  2.. 498  =>*A’,  499  =>'"’) 

A  string  literal  of  size 
MAX__IN_LEN,  including  the  quote 
characters . 


$MIN_INT  -2147483648 

A  universal  integer  literal 
whose  value  is  SYSTEM .MIN_IMT. 

$NAME  TINY^INTEGER 

A  name  of  a  predefined  numeric 
type  other  than  FLOAT,  INTEGER, 

SHORT  FLOAT,  SHORT  INTEGER, 

LONG  FLOAT,  or  .  LONG'inTEGER. 


$NEG_BASED_INT  16#FFFFFFFD# 

A  based  integer  literal  whose 
highest  order  nonzero  bit 
falls  in  the  sign  bit 
position  of  the  representation 
for  SYSTEM. MAX  INT. 


C-4 


APPENDIX  D 


WITHDRAWN  TESTS 


Some  tests  are  withdrawn  from  the  ACVC  because  they  do  not  conform  to  the 
Ada  Standard.  The  following  27  tests  had  been  withdrawn  at  the  time  of 
validation  testing  for  the  reasons  indicated.  A  reference  of  the  form 
"Al-ddddd"  is  to  an  Ada  Commentary. 


.  B28003A:  A  basic  declaration  (line  36)  incorrectly  follows  a 

later  declaration. 

.  E28005C:  This  test  requires  that  "PRAGMA  LIST  (ON);"  not  appear 

in  a  listing  that  has  been  suspended  by  a  previous  "PRAGMA  LIST 
(OFF);";  The  Ada  Standard  is  not  clear  on  this  point,  and  the 
matter  will  be  reviewed  by  the  AJPO. 

.  C34004A:  The  expression  in  line  168  yields  a  value  outside  the 

range  of  the  target  type  T,  but  there  is  no  hamdler  for 
CONSTRAINT_ERROR. 

.  C35502P;  The  equality  operators  in  lines  62  Euid  69  should  be 

Inequality  operators. 

.  A35902C!  The  assignment  in  line  17  of  the  nominal  upper  bound  of 

a  fixed-point  type  to  an  object  raises  CONSTRAINT_ERROR ,  for  that 
value  lies  outside  of  the  actual  range  of  the  type . 

.  C35904A;  The  elaboration  of  the  fixed-point  subtype  on  line  28 

wrongly  raises  CONSTRAINT_ERROR,  because  its  upper  bound  exceeds 
that  of  the  type. 

.  C35904B:  The  subtype  declau'ation  that  is  expected  to  raise 

CONSTRAINT__ERROR  when  its  compatibility  is  checked  against  that  of 
various  types  passed  as  actual  generic  parameters,  may,  in  fact, 
raise  HaMERIC_ERROR  or  CONSTRAINT__ERROR  for  reasons  not 
anticipated  by  the  test. 

.  C35A03E  and  C35A03R:  These  tests  assume  that  attribute  ’MANTISSA 

returns  0  when  applied  to  a  fixed-point  type  with  a  null  range, 
but  the  Ada  Standard  does  not  support  this  assumption. 
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WITHDRAWN  TESTS 
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.  C37213H:  The  subtype  declaration  of  SCONS  in  line  100  is 

incorrectly  expected  to  raise  an  exception  when  elaborated. 

.  C37213J:  The  aggregate  in  line  451  incorrectly  raises 

C0NSTRAINT_ERR0R. 

.  C37215C,  C37215E,  C37215G,  and  C37215H!  Various  discriminant 

constraints  are  incorrectly  expected  to  be  incompatible  with  type 
CONS. 

.  C38102C;  The  fixed-point  conversion  on  line  23  wrongly  raises 

C0NSTRAINT_ERR0R. 

.  C41402A:  The  attribute  *ST0RAGE_SIZE  is  incorrectly  applied  to  an 

object  of  an  access  type . 

•  C45332A;  The  test  expects  that  either  an  expression  in  line  52 

will  raise  an  exception  or  else  MACHINE_0VERFL0WS  is  FALSE. 
However,  an  implementation  may  evaluate  the  expression  correctly 
using  a  type  with  a  wider  range  than  the  beise  type  of  the 
operands,  and  MACHINE_0VERFL0WS  may  still  be  TRUE. 

.  C45614C:  The  function  call  of  IDENT_INT  in  line  15  uses  an 

argument  of  the  wrong  type . 

.  A74106C,  C85018B,  C87B04B,  and  CC1311B:  A  bound  specified  in  a 

fixed-point  subtype  declaration  lies  outside  of  that  calculated 
for  the  base  type,  raising  CONSTRAINT  ERROR.  Errors  of  this  sort 
occur  at  lines  37  4  59,  142  &  143,  “6  &  48,  and  252  &  253  of  the 
four  tests,  respectively. 

.  BC3105A!  Lines  159  through  168  expect  error  messages,  but  these 

lines  are  correct  Ada. 

.  ADI  A0 1  A;  The  declaration  of  subtype  SINT3  raises  C0NSTRAINT_ERR0R 
for  implementations  which  select  INT'SIZE  to  be  16  or  greater. 

.  CE2401H;  The  record  aggregates  in  lines  105  and  117  contain  the 

wrong  values. 

.  CE3208A:  This  test  expects  that  an  attempt  to  open  the  default 

output  file  (after  it  wm  closed)  with  mode  IN_FILE  raises 
NAME_ERR0R  or  USE_ERR0R;  by  Commentary  AI-00048,  M0DE_ERR0R  should 
be  raised . 
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